PierrunoYTandClaude Opus 5.5 13e2596b2e chore: move repository references to Twigpine/zero (#1105) ...

Update the Go module path, imports, install scripts, docs, workflows,
packaging and action defaults from Gitlawb/zero to Twigpine/zero. The npm
scope (already @twigpine/zero on main, with its @gitlawb/zero migration
notes), LICENSE, action author, the OpenGateway provider and historical
CHANGELOG links are unchanged.

The X-AIMLAPI-Integration-Repo header keeps Gitlawb/zero: it is what
AIMLAPI sees for attribution, so changing it needs a maintainer's yes.
docs/INSTALL.md keeps `go install github.com/Gitlawb/zero/...`, because
every tagged release so far declares that module path. The Homebrew
formula comment names the Twigpine/homebrew-tap tap.

Co-authored-by: Claude Opus 5.5 <[email protected]>

2026-10-17 07:13:21 +08:00

..

adapters_test.go

feat(sandbox): support self-exec pattern to eliminate separate helper binary (#946)

2026-10-16 14:09:28 +08:00

adapters.go

feat(sandbox): support self-exec pattern to eliminate separate helper binary (#946)

2026-10-16 14:09:28 +08:00

analyzer_test.go

fix(security): harden shell flag parsing, write roots, and formatters (#1066)

2026-10-12 15:02:17 +08:00

analyzer.go

fix(security): harden shell flag parsing, write roots, and formatters (#1066)

2026-10-12 15:02:17 +08:00

apply_patch_paths_test.go

fix(tools): make apply_patch tolerant and re-expose edit_file (#956)

2026-08-25 20:23:48 +08:00

architecture_baseline_test.go

Align sandbox command approval behavior (#322)

2026-06-26 13:20:07 +05:30

auto_allow_bash_test.go

fix(sandbox): don't auto-allow shell when re-entrancy skips wrapping (#727) (#744)

2026-07-20 11:56:36 +05:30

command_prefix_test.go

fix(sandbox): normalize launcher names before the command-prefix denylist (#934)

2026-08-21 12:50:11 +08:00

command_prefix.go

fix(sandbox): normalize launcher names before the command-prefix denylist (#934)

2026-08-21 12:50:11 +08:00

degraded_notice_test.go

fix(sandbox): say when a session's sandbox enforcement is degraded (#1082)

2026-10-12 09:36:52 +08:00

engine_test.go

Polish Zero's TUI and harden patch, model, and background workflows (#916)

2026-08-19 22:18:47 +05:30

engine.go

fix(sandbox): say when a session's sandbox enforcement is degraded (#1082)

2026-10-12 09:36:52 +08:00

execution_adapter_test.go

chore: move repository references to Twigpine/zero (#1105)

2026-10-17 07:13:21 +08:00

export_test.go

fix(sandbox): deny reads of Zero credential stores (#681)

2026-08-10 07:33:29 +08:00

git_credential_deny_test.go

fix(sandbox): deny reads of Zero credential stores (#681)

2026-08-10 07:33:29 +08:00

grant_scope_test.go

fix: address bugs found in a multi-agent codebase audit (#481)

2026-07-06 18:48:28 +08:00

grant_scope.go

fix: address bugs found in a multi-agent codebase audit (#481)

2026-07-06 18:48:28 +08:00

grants_lock_unix.go

fix(sandbox): add platform-specific write lock around grant state file (#752) (#755)

2026-07-27 12:11:35 +08:00

grants_lock_windows.go

fix(sandbox): add platform-specific write lock around grant state file (#752) (#755)

2026-07-27 12:11:35 +08:00

grants_test.go

chore: move repository references to Twigpine/zero (#1105)

2026-10-17 07:13:21 +08:00

grants.go

chore: move repository references to Twigpine/zero (#1105)

2026-10-17 07:13:21 +08:00

homebrew_tools_test.go

fix(sandbox): retry approved network shell commands (#301)

2026-06-23 17:44:46 +05:30

landlock_linux_test.go

Align sandbox permission blocks and backend states (#253)

2026-06-19 19:50:12 +05:30

landlock_linux.go

fix(sandbox): deny reads of Zero credential stores (#681)

2026-08-10 07:33:29 +08:00

landlock_other.go

fix(lint): resolve static analysis baseline (#769)

2026-07-27 09:59:33 +08:00

linux_helper_linux_test.go

feat(sandbox): unify command execution and enforcement (#781)

2026-07-21 18:55:13 +05:30

linux_helper_linux.go

feat(sandbox): support self-exec pattern to eliminate separate helper binary (#946)

2026-10-16 14:09:28 +08:00

linux_helper_other.go

feat(sandbox): support self-exec pattern to eliminate separate helper binary (#946)

2026-10-16 14:09:28 +08:00

linux_helper_test.go

feat(sandbox): support self-exec pattern to eliminate separate helper binary (#946)

2026-10-16 14:09:28 +08:00

linux_helper.go

feat(sandbox): support self-exec pattern to eliminate separate helper binary (#946)

2026-10-16 14:09:28 +08:00

log_monitor_darwin_test.go

Align sandbox permission blocks and backend states (#253)

2026-06-19 19:50:12 +05:30

log_monitor_darwin.go

Align sandbox permission blocks and backend states (#253)

2026-06-19 19:50:12 +05:30

log_monitor_other.go

Align sandbox permission blocks and backend states (#253)

2026-06-19 19:50:12 +05:30

manager_test.go

chore: move repository references to Twigpine/zero (#1105)

2026-10-17 07:13:21 +08:00

manager.go

feat(sandbox): support self-exec pattern to eliminate separate helper binary (#946)

2026-10-16 14:09:28 +08:00

normalize.go

Add local control browser and terminal tools (#319)

2026-06-26 08:22:56 +05:30

pathlists_test.go

Fix shared temp roots in sandbox scope (#314)

2026-06-25 09:47:55 +05:30

pathlists.go

Align sandbox permission blocks and backend states (#253)

2026-06-19 19:50:12 +05:30

paths.go

Align sandbox permission blocks and backend states (#253)

2026-06-19 19:50:12 +05:30

platform_contract_test.go

feat(sandbox): unify command execution and enforcement (#781)

2026-07-21 18:55:13 +05:30

profile_test.go

chore: move repository references to Twigpine/zero (#1105)

2026-10-17 07:13:21 +08:00

profile_worktree_test.go

fix(sandbox): protect worktree git pointers (#805)

2026-09-08 07:54:22 +08:00

profile_worktree_unix_test.go

fix(sandbox): protect worktree git pointers (#805)

2026-09-08 07:54:22 +08:00

profile.go

fix(sandbox): keep Windows restricted-token SIDs narrow and fail closed on DenyRead (#1006)

2026-09-12 08:33:06 +08:00

protected_create_linux_test.go

feat(sandbox): unify command execution and enforcement (#781)

2026-07-21 18:55:13 +05:30

protected_create_linux.go

chore: move repository references to Twigpine/zero (#1105)

2026-10-17 07:13:21 +08:00

reentrancy_test.go

fix(sandbox): scrub sensitive credentials from sandbox environment (#660)

2026-07-14 21:46:10 +08:00

request_permissions_test.go

feat(sandbox): unify command execution and enforcement (#781)

2026-07-21 18:55:13 +05:30

request_permissions.go

feat(sandbox): unify command execution and enforcement (#781)

2026-07-21 18:55:13 +05:30

risk_hardening_test.go

Add local control browser and terminal tools (#319)

2026-06-26 08:22:56 +05:30

risk.go

fix(tools): make apply_patch tolerant and re-expose edit_file (#956)

2026-08-25 20:23:48 +08:00

runner_linux_integration_test.go

chore: move repository references to Twigpine/zero (#1105)

2026-10-17 07:13:21 +08:00

runner_test.go

fix(sandbox): deny reads of Zero credential stores (#681)

2026-08-10 07:33:29 +08:00

runner_windows_integration_test.go

fix(sandbox): keep Windows restricted-token SIDs narrow and fail closed on DenyRead (#1006)

2026-09-12 08:33:06 +08:00

runner.go

chore: move repository references to Twigpine/zero (#1105)

2026-10-17 07:13:21 +08:00

runtime_lease_unix.go

feat(sandbox): unify command execution and enforcement (#781)

2026-07-21 18:55:13 +05:30

runtime_lease_windows.go

feat(sandbox): unify command execution and enforcement (#781)

2026-07-21 18:55:13 +05:30

runtime_lease.go

feat(sandbox): unify command execution and enforcement (#781)

2026-07-21 18:55:13 +05:30

runtime_state_test.go

fix(sandbox): preserve user config and retry denied writes (#801)

2026-07-27 15:35:04 +05:30

runtime_state.go

fix(sandbox): preserve user config and retry denied writes (#801)

2026-07-27 15:35:04 +05:30

safe_command_test.go

fix(security): harden shell flag parsing, write roots, and formatters (#1066)

2026-10-12 15:02:17 +08:00

safe_command.go

fix(security): harden shell flag parsing, write roots, and formatters (#1066)

2026-10-12 15:02:17 +08:00

scope_extra_read_test.go

fix(sandbox): refcount temporary roots so one holder's cleanup cannot revoke another's (#911)

2026-08-26 13:21:25 +08:00

scope_temp_refcount_test.go

fix(sandbox): refcount temporary roots so one holder's cleanup cannot revoke another's (#911)

2026-08-26 13:21:25 +08:00

scope_temporary_test.go

fix(sandbox): refcount temporary roots so one holder's cleanup cannot revoke another's (#911)

2026-08-26 13:21:25 +08:00

scope_test.go

fix(sandbox): clarify scoped permission prompts (#798)

2026-07-24 17:37:32 +05:30

scope_windows_test.go

Fix shared temp roots in sandbox scope (#314)

2026-06-25 09:47:55 +05:30

scope.go

fix(sandbox): refcount temporary roots so one holder's cleanup cannot revoke another's (#911)

2026-08-26 13:21:25 +08:00

seatbelt_integration_darwin_test.go

fix(sandbox): unblock git fetch/commit/add under the write-restricted sandbox (#654)

2026-07-13 21:56:10 +08:00

seccomp_linux.go

feat(sandbox): unify command execution and enforcement (#781)

2026-07-21 18:55:13 +05:30

seccomp_other.go

feat(sandbox): unify command execution and enforcement (#781)

2026-07-21 18:55:13 +05:30

seccomp_test.go

feat(sandbox): unify command execution and enforcement (#781)

2026-07-21 18:55:13 +05:30

seccomp.go

feat(sandbox): unify command execution and enforcement (#781)

2026-07-21 18:55:13 +05:30

types.go

feat(sandbox): unelevated Windows fallback tier instead of prompts-only degrade (#427)

2026-07-03 16:38:28 +08:00

windows_acl_apply_windows_test.go

fix(sandbox): keep Windows restricted-token SIDs narrow and fail closed on DenyRead (#1006)

2026-09-12 08:33:06 +08:00

windows_acl_apply_windows.go

fix(sandbox): keep a derived ACL target inside the write root it came from (#1040)

2026-09-15 08:35:54 +08:00

windows_acl_containment_windows_test.go

fix(sandbox): keep a derived ACL target inside the write root it came from (#1040)

2026-09-15 08:35:54 +08:00

windows_acl_containment_windows.go

fix(sandbox): keep a derived ACL target inside the write root it came from (#1040)

2026-09-15 08:35:54 +08:00

windows_acl_test.go

fix(sandbox): keep a derived ACL target inside the write root it came from (#1040)

2026-09-15 08:35:54 +08:00

windows_acl.go

fix(sandbox): keep a derived ACL target inside the write root it came from (#1040)

2026-09-15 08:35:54 +08:00

windows_command_runner_other.go

Add sandbox architecture baseline (#240)

2026-06-18 12:03:10 +05:30

windows_command_runner_test.go

fix(sandbox): keep Windows restricted-token SIDs narrow and fail closed on DenyRead (#1006)

2026-09-12 08:33:06 +08:00

windows_command_runner_windows.go

fix(sandbox): keep Windows restricted-token SIDs narrow and fail closed on DenyRead (#1006)

2026-09-12 08:33:06 +08:00

windows_command_runner.go

fix(sandbox): keep Windows restricted-token SIDs narrow and fail closed on DenyRead (#1006)

2026-09-12 08:33:06 +08:00

windows_degrade_test.go

feat(sandbox): unelevated Windows fallback tier instead of prompts-only degrade (#427)

2026-07-03 16:38:28 +08:00

windows_helper_discovery_test.go

fix(sandbox): self-dispatch the Windows sandbox helpers so they work in dev (#280)

2026-06-21 14:01:49 +05:30

windows_network_test.go

fix(sandbox): retry approved network shell commands (#301)

2026-06-23 17:44:46 +05:30

windows_network_windows.go

fix(sandbox): retry approved network shell commands (#301)

2026-06-23 17:44:46 +05:30

windows_network.go

fix(lint): resolve static analysis baseline (#769)

2026-07-27 09:59:33 +08:00

windows_online_offline_test.go

fix(sandbox): retry approved network shell commands (#301)

2026-06-23 17:44:46 +05:30

windows_process_windows.go

fix(tools): fix cmd.exe /S/C corrupting commands with embedded quotes (#465)

2026-07-05 11:36:00 +08:00

windows_runner_test.go

fix(tools): fix cmd.exe /S/C corrupting commands with embedded quotes (#465)

2026-07-05 11:36:00 +08:00

windows_runner.go

fix(sandbox): keep Windows restricted-token SIDs narrow and fail closed on DenyRead (#1006)

2026-09-12 08:33:06 +08:00

windows_setup_other.go

Add sandbox architecture baseline (#240)

2026-06-18 12:03:10 +05:30

windows_setup_test.go

fix(sandbox): keep Windows restricted-token SIDs narrow and fail closed on DenyRead (#1006)

2026-09-12 08:33:06 +08:00

windows_setup_windows.go

fix(sandbox): keep Windows restricted-token SIDs narrow and fail closed on DenyRead (#1006)

2026-09-12 08:33:06 +08:00

windows_setup.go

fix(sandbox): keep Windows restricted-token SIDs narrow and fail closed on DenyRead (#1006)

2026-09-12 08:33:06 +08:00

windows_shell_autoallow_test.go

fix(sandbox): stop bricking Windows when the sandbox isn't set up (degrade like Linux/macOS) (#295)

2026-06-21 22:49:39 +05:30

windows_token_windows.go

fix(sandbox): stop the Windows write jail honouring Everyone-granted paths (#865)

2026-08-04 18:51:35 +05:30

windows_unelevated_test.go

fix(sandbox): self-heal a corrupt unelevated setup marker (#437)

2026-07-03 19:34:56 +08:00

windows_unelevated.go

chore: move repository references to Twigpine/zero (#1105)

2026-10-17 07:13:21 +08:00

wsl_linux.go

feat(sandbox): complete sandbox breadth — WSL fallback + opt-in MITM TLS inspection (#206)

2026-06-15 11:38:14 +05:30

wsl_other.go

feat(sandbox): complete sandbox breadth — WSL fallback + opt-in MITM TLS inspection (#206)

2026-06-15 11:38:14 +05:30

wsl_test.go

Align sandbox command approval behavior (#322)

2026-06-26 13:20:07 +05:30

wsl.go

Add sandbox architecture baseline (#240)

2026-06-18 12:03:10 +05:30